United Arab Emirates

Situation Summary

The United Arab Emirates faces elevated cyber and regional security pressures amid broader Middle Eastern conflict dynamics, though the country remains operationally stable with no reported attacks or civil unrest inside UAE territory during the week of September 22–28. A single-day surge of approximately 640,000 cyberattacks—attributed in part to Iranian-linked actors and targeting government, energy, aviation, water, and critical infrastructure—represents the most significant threat indicator of the period. Commercial aviation and maritime operations continue with disruption, driven primarily by regional airspace routing changes and conflict-zone proximity rather than direct UAE-origin incidents.

Key Developments

• September 22 — UAE (national): Cybersecurity officials reported ~640,000 cyberattacks in a single day targeting government agencies, energy, aviation, water systems, and other critical infrastructure; Iranian-linked actors identified as a primary source.

• September 22 — Dubai International Airport (DXB) and Zayed International Airport (AUH): Both airports remained operational but reported flight delays and cancellations due to regional airspace and routing disruptions.

• September 22 — UAE commercial aviation: Emirates, Etihad, flydubai, and Air Arabia suspended or delayed routes to Bahrain, Kuwait, Saudi Arabia, Yemen, Tehran, and Muscat; flights to India experienced extended delays.

• September 22 — Strait of Hormuz approaches: A tanker was struck by an unidentified projectile while entering the Strait, elevating maritime risk for UAE-linked shipping and energy transport.

• September 23 — Dubai and Abu Dhabi airports: Multiple carriers reported delays exceeding eight hours on India routes; Tehran and Muscat services also significantly disrupted.

• September 23 — UAE travel environment: New Zealand revised travel advisory for UAE to "exercise increased caution," citing unpredictable regional security conditions, terrorism risk, and potential drone or missile attack scenarios.

• September 24–27 — UAE airports: Dubai International and Zayed International remained open with ongoing short-notice delay and cancellation risks; no closure events reported.

• No reported physical incidents: Civil unrest, major crime spikes, political instability, or physical attacks were not substantiated in Dubai, Abu Dhabi, Sharjah, or other emirates during the reporting period.

Highest-Risk Areas

Sub-national risk breakdown is currently unavailable; however, Dubai and Abu Dhabi—the primary commercial and aviation hubs—face the highest operational disruption risk due to their centrality to regional air traffic and their role as transit points for conflict-adjacent routes. Critical infrastructure sectors including energy, water, aviation, and telecommunications remain the highest-value cyber targets based on the September 22 attack profile. Coastal and maritime zones near the Strait of Hormuz present elevated risk for shipping and energy-sector assets.

How GeoBit Would Assist

Security teams should employ Intel Sweep and multi-language OSINT fusion to monitor Iranian-linked actor campaigns and track cyber threat indicators in real time; Conflict & Military tracking and Maritime & Aviation monitoring to correlate airspace restrictions with threat escalation; and AOI Monitoring & Early Warning on Dubai/Abu Dhabi airports, critical infrastructure nodes, and Strait of Hormuz approaches to enable rapid alerting for personnel movement and asset routing decisions.

7-Day Outlook

Regional conflict pressures are expected to sustain aviation and maritime disruption through early October, with cyber targeting of UAE critical infrastructure likely to remain elevated. No imminent escalation inside UAE territory is forecast, but short-notice flight delays and route changes should be anticipated for corporate travel planning and supply-chain routing.

Previous Weekly Briefs

A new United Arab Emirates brief is written every Monday, covering the week — each with its own risk map and downloadable CSV. Use the calendar to go further back.

• September 21, 2026⬇ CSV · $5
• September 14, 2026⬇ CSV · $5
• September 7, 2026⬇ CSV · $5
• September 3, 2026⬇ CSV · $5
• September 2, 2026⬇ CSV · $5
• September 1, 2026⬇ CSV · $5
• August 31, 2026⬇ CSV · $5